Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft
File:                     B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft (raw, json)
Hash identifier:          IW7UB6/Zk93qCjYXYn98oTUdcIcGrseDj59lsnwlXeg=
Subject key identifier:   14:53:EC:48:D7:71:9C:A6:99:C6:D1:23:42:F3:14:F6:FC:C1:B1:F5
Authority key identifier: B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A
Certificate issuer:       /CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A
Certificate serial:       629DAB2086AF3600AE7577065BDE233A3E4443AF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft
Manifest number:          6F
Signing time:             Fri 24 Jul 2026 02:42:39 +0000
Manifest this update:     Fri 24 Jul 2026 02:37:39 +0000
Manifest next update:     Sat 25 Jul 2026 05:33:39 +0000
Files and hashes:         1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: fDnmzf65jBSv74PMDMyNjaHpX/nCsTXRpP2C1qWxmnk=)
                          2: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl (hash: 1Peco0Vi9DKqrifs8/xZODkHWwdSO1cDcKCo0r3SmPE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl
                          rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9d:ab:20:86:af:36:00:ae:75:77:06:5b:de:23:3a:3e:44:43:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A
        Validity
            Not Before: Jul 24 02:37:39 2026 GMT
            Not After : Jul 25 05:33:39 2026 GMT
        Subject: CN=1453EC48D7719CA699C6D12342F314F6FCC1B1F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:1a:75:6a:e3:22:db:3a:1a:2b:73:c4:43:
                    ef:e2:59:4f:8a:7e:8c:31:76:09:0b:6f:fc:21:57:
                    76:9e:aa:21:ca:73:aa:45:03:80:37:79:10:43:8e:
                    35:b0:d3:3a:96:83:be:2f:11:fc:5a:c1:6d:a9:cf:
                    f7:02:48:14:bf:72:86:e3:16:f4:ed:90:9a:05:34:
                    a4:35:17:69:79:fb:6a:78:0a:7f:fc:c4:9e:ef:79:
                    d1:0e:d6:c9:49:0e:94:6c:3d:ba:89:dd:7b:20:64:
                    98:c4:06:5e:6f:c0:8e:08:cb:8c:ba:2f:c6:4f:44:
                    92:e4:0a:0d:22:b3:30:5c:9a:eb:f0:36:b5:35:66:
                    9d:c3:f6:f1:23:f2:56:4c:45:33:e1:f9:1b:66:4a:
                    75:f6:c0:36:c2:2c:5c:a2:a7:e8:1b:87:98:6b:5f:
                    ec:83:20:b5:c2:62:e2:cf:3d:b0:79:a1:33:5c:34:
                    3a:4d:00:6d:9d:5e:51:27:b2:60:b7:7b:d3:68:a2:
                    96:27:bc:79:bd:65:1d:04:30:a7:2c:1e:d4:46:e3:
                    66:9c:08:64:79:14:85:fb:b6:24:d6:dd:45:d3:e0:
                    52:03:34:2b:4f:bd:4e:47:fa:07:99:03:30:cd:c3:
                    58:00:66:d6:1c:da:53:d6:cb:c7:9c:10:5b:81:80:
                    cb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:53:EC:48:D7:71:9C:A6:99:C6:D1:23:42:F3:14:F6:FC:C1:B1:F5
            X509v3 Authority Key Identifier:
                keyid:B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:9a:0d:72:f0:e0:4a:bd:c2:5a:48:ed:91:81:97:69:ce:58:
         bb:c8:20:8f:76:3e:57:0a:46:ad:2e:97:cf:78:bb:e6:64:9f:
         24:ed:75:46:26:f7:a3:f3:b6:fa:f3:be:25:8d:0a:13:12:70:
         df:ac:4d:a5:d0:0d:6b:9c:fa:c6:1f:36:d3:c4:b9:06:e6:a2:
         cd:2f:9f:d7:20:ef:42:c5:d2:3b:79:b5:3f:a3:c0:24:cf:a7:
         aa:3a:d3:05:6a:ab:70:82:b5:a3:5a:cf:dd:e1:23:9e:db:b5:
         63:17:9f:64:64:21:a8:27:f3:5f:ca:c2:37:22:ec:44:66:46:
         5a:b8:5c:ae:d3:73:21:89:82:9c:c2:5f:83:18:88:53:44:27:
         36:d0:13:15:eb:06:f0:52:71:3e:e2:d5:8d:52:d1:11:2f:49:
         30:28:80:a1:db:dc:03:10:fc:69:43:06:70:13:1e:a2:de:04:
         d3:fa:e5:af:92:ad:80:13:a3:b9:3d:a4:a7:78:e9:9d:fb:79:
         fd:3f:3d:a3:d0:3e:d8:88:2b:41:f5:ba:2e:8f:57:74:c9:70:
         6c:29:9a:57:79:1e:43:6e:f8:e3:cf:09:c8:d3:fc:9c:a7:9a:
         33:46:b2:e0:94:aa:a6:9b:a4:61:ba:b1:e9:1c:2f:8b:50:45:
         d9:4b:35:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:30 2026 by rpki-client